Internal communications are a significant driver of phishing failures. Emails impersonating internal teams, particularly HR and IT, received the most failures in phishing simulations.

April 28, 2025

Internal communications are a significant driver of phishing failures. Emails impersonating internal teams, particularly HR and IT, received the most failures in phishing simulations. — This cybersecurity statistic was published by KnowBe4 in April 2025. It covers topics including Email, Phishing, HR, IT. The original data appears in Q1 2025 Phishing Report. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 4/28/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Internal communications are a significant driver of phishing failures. Emails impersonating internal teams, particularly HR and IT, received the most failures in phishing simulations. This data was published by KnowBe4 and covers Email, Phishing, HR, IT.

Where does this data come from?

This statistic comes from Q1 2025 Phishing Report, published by KnowBe4 on April 28, 2025. You can view the original report at https://www.knowbe4.com/hubfs/Q1-2025_Phishing-Report-Infographic_EN.jpg.

What cybersecurity topics does this cover?

This statistic relates to Email, Phishing, HR, IT. Browse more statistics on Email or from KnowBe4.

CYBERSTATS

Internal communications are a significant driver of phishing failures. Emails impersonating internal teams, particularly HR and IT, received the most failures in phishing simulations.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

89% of Global Relay's sample accounts captured email communications, making it the most captured channel.

Social media is the leading medium for successful scams at 34%, surpassing email (28%), phone calls (25%), text messages (24%), and online ads (21%) in 2025.

107 email-related HIPAA breaches were reported to the Department of Health and Human Services in just the first half of 2025.

In one enforcement case, a clinic was fined $25,000 for a single message that contained protected health information (PHI) and was sent to the wrong person without encryption

78% of organizations worldwide experienced an email security breach in the previous 12 months.

41% of organizations cited brand and reputational damage as the most common consequence of an email security breach.

Browse by Topic

Stay Ahead of Cyber Threats